Rasi Afeef (Patchstack Alliance)
30 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-40218İstismar yok | WordPress TH Advance Product Search plugin <= 1.1.4 - Unauthenticated Plugin Settings Change vulnerabilitythemehunk · advance product search · CWE-862 | Kritik9,8 | — | %0,4 | 8 May 2024 |
24İzleyin | CVE-2022-45847İstismar yok | WordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)wpassist · countdown widget · CWE-352 | Orta6,1 | — | %0,2 | 27 Mar 2024 |
39İzleyin | CVE-2022-38057İstismar yok | WordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerabilitythemehunk · th advance product search · CWE-862 | Kritik9,8 | — | %0,6 | 25 Mar 2024 |
39İzleyin | CVE-2022-36418İstismar yok | WordPress HREFLANG Tags Lite Plugin <= 2.0.0 is vulnerable to Broken Authenticationdcgws · hreflang tags lite · CWE-862 | Kritik9,8 | — | %0,6 | 17 Oca 2024 |
24İzleyin | CVE-2022-42880İstismar yok | WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)auto upload images project · auto upload images · CWE-352 | Orta6,1 | — | %0,2 | 13 Haz 2023 |
35İzleyin | CVE-2023-26014İstismar yok | WordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)dogblocker · minify html · CWE-352 | Yüksek8,8 | — | %0,2 | 23 May 2023 |
35İzleyin | CVE-2022-43459İstismar yok | WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)captainform · captainform · CWE-352 | Yüksek8,8 | — | %0,2 | 28 Şub 2023 |
35İzleyin | CVE-2022-30544İstismar yok | WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)hyumika · openstreetmap · CWE-352 | Yüksek8,8 | — | %0,2 | 17 Oca 2023 |
26İzleyin | CVE-2022-35730İstismar yok | WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)oceanwp · sticky header · CWE-352 | Orta6,5 | — | %0,2 | 4 Ara 2022 |
35İzleyin | CVE-2022-41634İstismar yok | WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerabilitymaxfoundry · media library folders · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Kas 2022 |
24İzleyin | CVE-2022-38075İstismar yok | WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)webartesanal · mantenimiento web · CWE-79 | Orta6,1 | — | %0,2 | 18 Kas 2022 |
17İzleyin | CVE-2022-27855İstismar yok | WordPress Analytics Cat plugin <= 1.0.9 - Plugin Settings change via Cross-Site Request Forgery (CSRF) vulnerabilityfatcatapps · analytics cat · CWE-352 | Orta4,3 | — | %0,3 | 8 Kas 2022 |
35İzleyin | CVE-2022-38454İstismar yok | WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerabilitykraken · kraken.io image optimizer · CWE-352 | Yüksek8,8 | — | %0,3 | 23 Eyl 2022 |
24İzleyin | CVE-2022-36417İstismar yok | WordPress 3D Tag Cloud plugin <= 3.8 - Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability3d tag cloud project · 3d tag cloud · CWE-79 | Orta6,1 | — | %0,2 | 23 Eyl 2022 |
35İzleyin | CVE-2022-36798İstismar yok | WordPress Mega Addons For WPBakery Page Builder plugin <= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerabilitytopdigitaltrends · mega addons for wpbakery page builder · CWE-352 | Yüksek8,8 | — | %0,3 | 23 Eyl 2022 |
35İzleyin | CVE-2022-38139İstismar yok | WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesrdstation · rd station · CWE-352 | Yüksek8,8 | — | %0,3 | 13 Eyl 2022 |
35İzleyin | CVE-2022-37411İstismar yok | WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerabilitycaptcha code project · captcha code · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Eyl 2022 |
35İzleyin | CVE-2022-37405İstismar yok | WordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerabilitybetter font awesome project · better font awesome · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Eyl 2022 |
19İzleyin | CVE-2022-35725İstismar yok | WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitywp-forecast project · wp-forecast · CWE-79 | Orta4,8 | — | %0,5 | 9 Eyl 2022 |
35İzleyin | CVE-2022-35277İstismar yok | WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerabilitygetresponse · getresponse · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Eyl 2022 |
24İzleyin | CVE-2022-36796İstismar yok | WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)callrail · callrail phone call tracking · CWE-79 | Orta6,1 | — | %0,3 | 1 Eyl 2022 |
35İzleyin | CVE-2022-36373İstismar yok | WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesmp3-jplayer project · mp3-jplayer · CWE-352 | Yüksek8,8 | — | %0,4 | 1 Eyl 2022 |
17İzleyin | CVE-2021-36891İstismar yok | WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Changesupsystic · photo gallery · CWE-352 | Orta4,3 | — | %0,3 | 15 Haz 2022 |
17İzleyin | CVE-2022-29453İstismar yok | WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key updateayecode · api key for google maps · CWE-352 | Orta4,3 | — | %0,4 | 15 Haz 2022 |
17İzleyin | CVE-2021-36890İstismar yok | WordPress Social Share Buttons by Supsystic plugin <= 2.2.2 - Cross-Site Request Forgery (CSRF) vulnerabilitysupsystic · social share buttons · CWE-352 | Orta4,3 | — | %0,4 | 2 Haz 2022 |
- CVE-2022-4021839İzleyin
WordPress TH Advance Product Search plugin <= 1.1.4 - Unauthenticated Plugin Settings Change vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themehunk · advance product search8 May 2024
- CVE-2022-4584724İzleyin
WordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0wpassist · countdown widget27 Mar 2024
- CVE-2022-3805739İzleyin
WordPress TH Advance Product Search plugin <= 1.2.1 - Unauthenticated Plugin Settings Reset vulnerability
KritikCVSS 9,8İstismar yokEPSS %0themehunk · th advance product search25 Mar 2024
- CVE-2022-3641839İzleyin
WordPress HREFLANG Tags Lite Plugin <= 2.0.0 is vulnerable to Broken Authentication
KritikCVSS 9,8İstismar yokEPSS %0dcgws · hreflang tags lite17 Oca 2024
- CVE-2022-4288024İzleyin
WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 6,1İstismar yokEPSS %0auto upload images project · auto upload images13 Haz 2023
- CVE-2023-2601435İzleyin
WordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0dogblocker · minify html23 May 2023
- CVE-2022-4345935İzleyin
WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0captainform · captainform28 Şub 2023
- CVE-2022-3054435İzleyin
WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0hyumika · openstreetmap17 Oca 2023
- CVE-2022-3573026İzleyin
WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
OrtaCVSS 6,5İstismar yokEPSS %0oceanwp · sticky header4 Ara 2022
- CVE-2022-4163435İzleyin
WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0maxfoundry · media library folders18 Kas 2022
- CVE-2022-3807524İzleyin
WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0webartesanal · mantenimiento web18 Kas 2022
- CVE-2022-2785517İzleyin
WordPress Analytics Cat plugin <= 1.0.9 - Plugin Settings change via Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0fatcatapps · analytics cat8 Kas 2022
- CVE-2022-3845435İzleyin
WordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0kraken · kraken.io image optimizer23 Eyl 2022
- CVE-2022-3641724İzleyin
WordPress 3D Tag Cloud plugin <= 3.8 - Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %03d tag cloud project · 3d tag cloud23 Eyl 2022
- CVE-2022-3679835İzleyin
WordPress Mega Addons For WPBakery Page Builder plugin <= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0topdigitaltrends · mega addons for wpbakery page builder23 Eyl 2022
- CVE-2022-3813935İzleyin
WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0rdstation · rd station13 Eyl 2022
- CVE-2022-3741135İzleyin
WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0captcha code project · captcha code9 Eyl 2022
- CVE-2022-3740535İzleyin
WordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0better font awesome project · better font awesome9 Eyl 2022
- CVE-2022-3572519İzleyin
WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
OrtaCVSS 4,8İstismar yokEPSS %0wp-forecast project · wp-forecast9 Eyl 2022
- CVE-2022-3527735İzleyin
WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0getresponse · getresponse9 Eyl 2022
- CVE-2022-3679624İzleyin
WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0callrail · callrail phone call tracking1 Eyl 2022
- CVE-2022-3637335İzleyin
WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0mp3-jplayer project · mp3-jplayer1 Eyl 2022
- CVE-2021-3689117İzleyin
WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change
OrtaCVSS 4,3İstismar yokEPSS %0supsystic · photo gallery15 Haz 2022
- CVE-2022-2945317İzleyin
WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key update
OrtaCVSS 4,3İstismar yokEPSS %0ayecode · api key for google maps15 Haz 2022
- CVE-2021-3689017İzleyin
WordPress Social Share Buttons by Supsystic plugin <= 2.2.2 - Cross-Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0supsystic · social share buttons2 Haz 2022